[Chain-Frost]

Purpose

Reconcile the original installed-scripts/MCP/distribution architecture plan with the implementation already merged into main, then close the remaining wheel curation and project-copy gaps. This is now an implementation PR, not a deferred-only document.

PRs #118 and #119 are independent and are not blockers. PRs #100, #120 and #129 have already merged.

Authoritative updated requirements and status: docs/work/2026-10-17-installed-scripts-mcp-pip-distribution.md.

Existing implementation retained (reviewed against requirements)

• ryan-tools is the PyPI distribution while ryan_library remains the Python import name; legacy aliases were explicitly retired in Install QGIS MCP and PyPI user installer with conditional Codex setup #120.
• Comprehensive default engineering/GIS dependency installation remains intentional.
• Python 3.13+ remains supported, including ryan-culverts (later maintainer decision supersedes the former tentative November 3.14-only plan).
• run-hy8 and ryan-culverts are separately installed pip dependencies; source hydraulic submodules are already removed.
• Installed ryan-scripts and discovery-only ryan-mcp work without a checkout. Capability profiles, mutation approval metadata and bounded listing are preserved.
• No direct unapproved run_workflow is added.

New code in this PR

• Explicit, reviewed 83-file installed script allowlist, encompassing all 33 distinct existing MCP script targets while leaving 63 unreviewed/legacy source files repository-only.
• Wheel builder stages only those files; verifier rejects missing, unexpected and non-byte-identical script members.
• New ryan-scripts list / ryan-scripts copy CLI to locate original copyable files and safely copy to an existing project folder, with explicit overwrite and dry-run support.
• Focused packaging and CLI tests and installed-wheel smoke tests, plus updated MCP, wrapper and work-plan documentation.
• Nonblocking tracked follow-ups for external Windows/QGIS/TUFLOW/HY-8 engineering acceptance and other repository-only wrapper reviews.

Validation required before merge

• All five required checks pass at the exact final head (Ruff, Policy, Hosted tests, Package, Python 3.13/MCP).
• Curated wheel member verification and the isolated no-checkout installed-wheel test pass.
• Documentation/link checks and head SHA reviewed.
• Mark this PR ready and squash merge only after those checks, without forcing bypass.

Publication: This PR includes package changes; follow the repository's normal verified post-merge publishing policy. Do not manually publish/deletе releases or make unrelated installer changes.

No direct MCP execution, no Python 3.14-only policy, and no implementation from #118/#119 is being merged here.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-18T16:56:54.150960Z	21eef0a	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 21eef0a314

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".